Sun, Dec 4 2005 23:31
The size of the logs
The default size. You probably haven't even looked at these have you? The default size for the event logs can be pretty small. And the size of this one in particular, the Directory Service event log of 512 KB means that I don't have any entry prior to when a SBS box freaked out on a Consultant.
So can we adjust that? Sure can. What's the max? A heck of a lot more than 512 KB. Just remember we should not go more than 64000 KB as that will cause issues with our backup, but man I sure wish that Directory services event log would have been set a lot higher than 512 KB.
The more of this story? Partition off your C: drive appropriately, move off data folders, but man, mess with the default size of those audit logs, 'cause you never know when you'll need to have the data that those logs will give you. All we have now is confirmation that that box was freaking out. We don't have anything in that log file right 'before' what looks to be the start of the 'freak out'.
Ensuring you have the data you need when you need it...well that extends to the log files as well.
Filed under: Best Practices